Technology
Ubuntu 26.10 completes full transition to Rust-based core utilities
Canonical finishes replacing legacy command-line tools after resolving security audit issues in final core utilities.
The short version
- Ubuntu 26.10 completed its transition to Rust-based core utilities by migrating the final commands—cp, mv, and rm—to memory-safe versions.[Hacker News]
- The full suite of Rust core utilities now includes tools such as ls, cat, chmod, and du, building on a rollout that began in 2025.[Hacker News]
- The final three utilities were previously delayed in Ubuntu 26.04 LTS after security audits identified time-of-check to time-of-use (TOCTOU) vulnerabilities.[Slashdot · Hacker News]
- Canonical plans to release the Ubuntu 26.10 beta later this month ahead of the scheduled stable launch on October 15, 2026.[Hacker News]
Key facts
- Ubuntu 26.10 transitioned the final held-back utilities—cp, mv, and rm—completing the move to Rust-based coreutils.[Slashdot · Hacker News]
- Canonical commissioned security firm Zellic for audits between December 2025 and March 2026, which flagged 113 issues and 44 assigned CVEs.[Slashdot]
- Canonical began replacing foundational system software with Rust-based alternatives in 2025, starting with Ubuntu 25.10.[Slashdot · Hacker News]
- The stable release of Ubuntu 26.10 'Stonking Stingray' is scheduled for October 15, 2026.[Hacker News]
What remains uncertain
- Canonical states that the vast majority of the 113 audit issues have been resolved, though specific outstanding unassigned issues were not detailed.[Slashdot]
Sources
Outlet counts describe coverage, not independent confirmation. Reports may share a wire service or original source.